Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

95 results

mediator

lawndoc/mediator

An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

command-and-controlencryption-decryption-toolsincident-response+5

100

2 years ago

uoftctf-2025-chals-public

uoftctf/uoftctf-2025-chals-public

Challenge handouts, source code, and solutions for UofTCTF 2025

binary-exploitationcryptographyctf+6

401 year ago

rbinmcp

kirkderp/rbinmcp

Rogue Binary Model Context Protocol (MCP): a Docker-packaged binary analysis lab for AI agents. It supports reverse engineering, malware triage, and…

binary-analysisdebuggersdynamic-analysis-sandboxing+3

233 months ago

libloong

libriscv/libloong

The fastest LoongArch sandbox

binary-analysisembedded-systems-securityfuzzing+3

647 months ago

pixma

leecher1337/pixma

Tools for analyzing Canon Pixma printer firmware

data-recoveryembedded-systems-securityencryption-decryption-tools+3

231 year ago

SnatchBox

liji32/snatchbox

SnatchBox (CVE-2020-27935) is a sandbox escape vulnerability and exploit affecting macOS up to version 10.15.x

binary-exploitationexploitationpayload-development+2

325 years ago

sonicrack

bishopfox/sonicrack

Decrypt encrypted SonicOSX firmware images

embedded-systems-securityencryption-decryption-toolsfirmware-analysis+1

251 year ago

CVE-2022-24481-POC

fr4nkxixi/cve-2022-24481-poc

POC for CLFS CVE-2022-24481

binary-exploitationexploitationreverse-engineering+1

143 years ago

tandasat.github.io

tandasat/tandasat.github.io

Remote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…

educationlearning-paths-coursesreverse-engineering+2

193 months ago

-Pegasus-Suite

sobri3195/-pegasus-suite

A comprehensive security toolkit with 1000+ penetration testing and security assessment tools.

exploitationinformation-gatheringnetwork-security+9

146 months ago

quantum-zk-proof-poc

trailofbits/quantum-zk-proof-poc

Proof-of-concept code for beating Google's ZK proof of quantum cryptanalysis

cryptographyeducationexploitation+3

164 months ago

winmagic_sd

patois/winmagic_sd

Technical Write-Up on and PoC Exploit for CVE-2020-11519 and CVE-2020-11520

binary-exploitationeducationexploitation+4

123 years ago

gv_decryptor

caveeroo/gv_decryptor

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

android-securitycryptographydata-recovery+5

51 month ago

pdbdownload

p0dalirius/pdbdownload

An utility to download PDB files associated with a Portable Executable (PE).

binary-analysisreverse-engineeringutilities-frameworks

191 year ago

LiberationPlay-CVE-2025-24132-AirBourne-POC

thegaminggallifreyan/liberationplay-cve-2025-24132-airbourne-poc

POC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash

binary-exploitationcryptographydebuggers+7

86 months ago

CVE-2022-24481-analysis

uname1able/cve-2022-24481-analysis

Deep-dive analysis of Windows CLFS type confusion (CVE-2022-24481) with root-cause explanation, exploitation flow, kernel gadget details, and working…

binary-exploitationexploitationprivilege-escalation+2

20 days ago

tricorne

crussella0129/tricorne

a Fedora remix focused on pentesting and purple hat tooling

defensive-toolsexploitationforensics+8

54 months ago

grandstream-cve-2026-2329-analysis

vivianuba/grandstream-cve-2026-2329-analysis

Defensive vulnerability-research project comparing vulnerable and patched Grandstream GXP1600 firmware for CVE-2026-2329, using SquashFS extraction,…

binary-analysiseducationfirmware-analysis+4

16 days ago

Previous 1 2 3 456 Next